e26436faab
- add dovecot-profiles-boo1199535-mr881.diff: update dovecot profiles for latest dovecot (boo#1199535) OBS-URL: https://build.opensuse.org/request/show/977391 OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=336
55 lines
2.0 KiB
Diff
55 lines
2.0 KiB
Diff
From https://gitlab.com/apparmor/apparmor/-/merge_requests/881
|
|
|
|
From ad8df7f88fdac5cf230da07bb0f45761a22202b3 Mon Sep 17 00:00:00 2001
|
|
From: Christian Boltz <apparmor@cboltz.de>
|
|
Date: Sun, 15 May 2022 20:53:35 +0200
|
|
Subject: [PATCH] Add missing permissions for dovecot-{imap,lmtp,pop3}
|
|
|
|
References: https://bugzilla.opensuse.org/show_bug.cgi?id=1199535
|
|
---
|
|
profiles/apparmor.d/usr.lib.dovecot.imap | 1 +
|
|
profiles/apparmor.d/usr.lib.dovecot.lmtp | 2 ++
|
|
profiles/apparmor.d/usr.lib.dovecot.pop3 | 1 +
|
|
3 files changed, 4 insertions(+)
|
|
|
|
diff --git a/profiles/apparmor.d/usr.lib.dovecot.imap b/profiles/apparmor.d/usr.lib.dovecot.imap
|
|
index ade0e4157..8ee2d5a4e 100644
|
|
--- a/profiles/apparmor.d/usr.lib.dovecot.imap
|
|
+++ b/profiles/apparmor.d/usr.lib.dovecot.imap
|
|
@@ -35,6 +35,7 @@ profile dovecot-imap /usr/lib/dovecot/imap {
|
|
|
|
owner /tmp/dovecot.imap.* rw,
|
|
@{PROC}/@{pid}/attr/{apparmor/,}current rw,
|
|
+ @{PROC}/@{pid}/stat r,
|
|
/usr/bin/doveconf rix,
|
|
/usr/lib/dovecot/imap mrix,
|
|
/usr/share/dovecot/** r,
|
|
diff --git a/profiles/apparmor.d/usr.lib.dovecot.lmtp b/profiles/apparmor.d/usr.lib.dovecot.lmtp
|
|
index 7b2e5599b..ad26eff3e 100644
|
|
--- a/profiles/apparmor.d/usr.lib.dovecot.lmtp
|
|
+++ b/profiles/apparmor.d/usr.lib.dovecot.lmtp
|
|
@@ -31,6 +31,8 @@ profile dovecot-lmtp /usr/lib/dovecot/lmtp {
|
|
|
|
@{HOME}/.dovecot.svbin r,
|
|
@{PROC}/@{pid}/attr/{apparmor/,}current rw,
|
|
+ owner @{PROC}/@{pid}/io r,
|
|
+ owner @{PROC}/@{pid}/stat r,
|
|
@{PROC}/*/mounts r,
|
|
/tmp/dovecot.lmtp.* rw,
|
|
/usr/lib/dovecot/lmtp mr,
|
|
diff --git a/profiles/apparmor.d/usr.lib.dovecot.pop3 b/profiles/apparmor.d/usr.lib.dovecot.pop3
|
|
index a593d6b1a..ed010ddaf 100644
|
|
--- a/profiles/apparmor.d/usr.lib.dovecot.pop3
|
|
+++ b/profiles/apparmor.d/usr.lib.dovecot.pop3
|
|
@@ -26,6 +26,7 @@ profile dovecot-pop3 /usr/lib/dovecot/pop3 {
|
|
@{DOVECOT_MAILSTORE}/** rwkl,
|
|
|
|
@{HOME} r, # ???
|
|
+ @{PROC}/@{pid}/stat r,
|
|
/usr/lib/dovecot/pop3 mr,
|
|
|
|
# Site-specific additions and overrides. See local/README for details.
|
|
--
|
|
GitLab
|
|
|